CVE-2022-30780
CVE-2022-30780
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c has a typo that disrupts use of multiple read operations on large headers.
CVSS 7.5 · High · EPSS 57.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
lighttpd Debian:12
- Affected ranges
- ECOSYSTEM: < 1.4.59-1
Update to 1.4.59-1
lighttpd Debian:13
- Affected ranges
- ECOSYSTEM: < 1.4.59-1
Update to 1.4.59-1
lighttpd Debian:14
- Affected ranges
- ECOSYSTEM: < 1.4.59-1
Update to 1.4.59-1
lighttpd Ubuntu:Pro:16.04:LTS
- Versions
- 1.4.35-4ubuntu1
- 1.4.35-4ubuntu2
- 1.4.35-4ubuntu2.1
- 1.4.35-4ubuntu2.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published